MailEnable Enterprise Premium Authorization Bypass Vulnerability in WebAdmin Mobile Portal

A vulnerability allowing authorization bypass has been identified in MailEnable Enterprise Premium versions through 10.55. This issue resides in the WebAdmin mobile portal, where attackers can exploit authentication checks by reusing AuthenticationToken cookies from low-privileged users. The tokens can be obtained from the WebMail login endpoint using the PersistentLogin parameter and then replayed in the WebAdmin portal to execute high-privilege administrative actions.

Impact

Exploitation of this vulnerability allows for unauthorized access to administrative functions within the WebAdmin mobile portal, potentially leading to unauthorized changes or actions on the server.